https://bugzilla.wikimedia.org/show_bug.cgi?id=48501

--- Comment #93 from Matthew Flaschen <[email protected]> ---
I can think of three significant problems with self-signed certificates:

1. It trains people to ignore SSL warnings, which means they ignore them when
it's a legit problem.
2. It causes problems with automated tests (not clear if all of these have been
worked around).
3. It's a real pain when testing manually because you have to visit
https://bits.beta.wmflabs.org/ (and maybe also upload.beta.wmflabs.org)
manually in Firefox.

FWIW, https://en.wikipedia.beta.wmflabs.org isn't working at all (not even
invalid) right now (can't connect), but I assume that's temporary

If cost is the issue, did we consider setting up our own certificate authority
(chained to an existing root)?  It's an upfront cost, but as I understand it
that means no per-cert cost.

Google and Microsoft both have them, just to name a couple.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to